An administration EC2 instance should connect over HTTPS only to a specific API.
Do not allow unnecessary outbound destinations.
Which setting is most appropriate?
Limit the security group's egress rules by destination, port, and protocol.
Detailed explanation
Egress rules control the destinations and protocols that may leave the instance.
Egress rules control the destinations and protocols that may leave the instance.
A name does not alter allowed network traffic.
A name does not alter allowed network traffic.
DNS TTL does not control security-group egress.
DNS TTL does not control security-group egress.
S3 versioning is not EC2 network control.
S3 versioning is not EC2 network control.
Check official documentation
Compare the following points with the official documentation.
VPC security group outbound rulesの公式説明を確認する。
What to confirm
Security Groupのinboundとegressの役割を説明できる。
Key points
- Security group egress
- Destination
- HTTPS
Notes
- Environment: AWS公式SOA-C03試験ガイドとAWS公式ドキュメントの確認
- Confirm current AWS service behavior in the official documentation.
Foundation review
Least outbound access
Egress rules can narrow a management instance to the API destinations it needs.
Stateful return
Responses to allowed outbound connections are permitted by security-group statefulness.